CRUD endpoints for per-user analytics saved views.

All routes are gated behind the fflag_feat_fit_1424_analytics_saved_views feature flag AND the same should_check_analytics_permission helper used by the KPI endpoints, so a user who cannot access the analytics dashboard cannot read view metadata even via a shared link.

Lookup uses uuid (not PK) so the primary key is never exposed.

Access rules

• list / create — scoped to requesting user + active org
• retrieve — any org member who passes the analytics permission check (enables shared-link UX: ?view=<uuid> in the URL)
• update / destroy — owner-only